Well Architected S3 Bucket that uses S3_MANAGED encryption, enforces ssl, denies public access is versioned, and uses CloudFront distribution with bucket as origin.

Default Alarms

By default it is configured with FourxxErrorsAlarm and FivexxErrorsAlarm alarms.

Note that in freemium version the default alarm does not have any action. However, in premium version it uses the Well Architected Alarm construct, which sets up an alarm action to notify the SNS Topic AlarmEventsTopic by default.

Example

Default Usage

new WaBucket(this, "LogicalId", {});

Example

Custom Configuration

new WaBucket(this, "LogicalId", {
enforceSSL: false
});

Compliance

It addresses the following compliance requirements

  • Blocks public access

    PCI, HIPAA, GDPR, APRA, MAS, NIST4

  • Bucket versioning enabled

    PCI, APRA, MAS, NIST4

  • Only allow secure transport protocols

    PCI, APRA, MAS, NIST4

  • Server side encryption

    PCI, HIPAA, GDPR, APRA, MAS, NIST4

Hierarchy

  • Bucket
    • WaBucket

Constructors

Methods

Generated using TypeDoc